On January 3, 2023, Maternal & Family Health Services, Inc suffered a data breach caused by an external hacking incident. The breach exposed the financial account information of one individual, though the intrusion was detected earlier on April 4, 2022. The compromised data posed a risk of identity theft, prompting the company to offer 12 months of identity theft protection services via IDX to the affected party. While the breach was limited in scope (affecting only one person), the exposure of financial details aligns with incidents that can lead to fraudulent activity or reputational harm. The delay between discovery and reporting (nearly a year) may further amplify concerns regarding data security protocols and response efficiency. The nature of the breach—external system hacking targeting financial data—classifies it as a cyber attack with potential financial and reputational repercussions, though the scale remains confined to a single individual.

The Maine Office of the Attorney General reported that Maternal & Family Health Services, Inc. experienced a ransomware attack between August 21, 2021, and April 4, 2022, affecting a total of 461,070 individuals, with 68 residents of Maine specifically impacted. The notification was made on January 10, 2023, with written notifications sent to affected individuals on January 3 and 4, 2023. Identity theft protection services were offered for 12 months.